Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/teWatP2bGaMT75ifXK7Vicrh-fI.roa
File: teWatP2bGaMT75ifXK7Vicrh-fI.roa (raw, json)
Hash identifier: JBY3NuWBXO4zHNoxlttDEpOH2xgeRXMli3CK7FTI+Pg=
Subject key identifier: B5:E5:9A:B4:FD:9B:19:A3:13:EF:98:9F:5C:AE:D5:89:CA:E1:F9:F2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A13F44A9B56BA7C248CAE1164621A59C00
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/teWatP2bGaMT75ifXK7Vicrh-fI.roa
Signing time: Thu 15 Oct 2026 11:13:46 +0000
ROA not before: Thu 15 Oct 2026 11:13:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402948
IP address blocks: 212.212.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:44:a9:b5:6b:a7:c2:48:ca:e1:16:46:21:a5:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 15 11:13:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5e59ab4fd9b19a313ef989f5caed589cae1f9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:8b:9b:80:c7:69:bd:29:f9:28:04:d4:d9:
8a:81:2f:2a:37:03:65:50:fe:76:91:3f:7d:ad:03:
c6:7c:f2:79:ce:b9:89:bd:2d:70:42:73:08:60:96:
9c:93:61:84:65:45:0b:d2:cb:0a:db:22:b0:b5:76:
04:42:52:ea:c4:8e:37:26:2a:e1:27:9a:64:56:72:
18:4c:67:9a:b1:ef:10:39:18:c5:c8:ed:a6:96:c7:
a8:f4:9f:04:49:8d:e6:79:89:4b:20:2f:17:22:bc:
b3:0b:ae:cf:91:13:fa:e3:f5:89:72:70:69:d6:e1:
b6:7a:33:60:99:63:51:79:b8:16:ca:25:9b:fe:fc:
19:4e:7c:7b:11:a7:85:f8:52:d2:f2:ba:d3:77:1f:
01:ff:9c:08:48:7a:b2:96:cf:46:68:64:e9:b7:ea:
7a:df:9f:a0:6f:fd:35:58:14:b8:5d:52:c1:d2:a8:
b4:2b:82:b0:a2:d3:40:b4:44:b9:9b:0a:ee:bf:22:
cd:e1:ea:fa:99:b5:75:68:04:13:16:e7:4f:77:a0:
7a:a3:cd:fa:a4:e9:d6:6d:51:97:8c:60:dd:d0:ec:
d3:da:b7:8e:fd:82:b3:f9:d7:15:39:26:0a:18:f2:
06:42:ae:c9:fd:8b:fd:10:c9:cb:d5:cd:47:97:75:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:9A:B4:FD:9B:19:A3:13:EF:98:9F:5C:AE:D5:89:CA:E1:F9:F2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/teWatP2bGaMT75ifXK7Vicrh-fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.212.25.0/24
Signature Algorithm: sha256WithRSAEncryption
08:04:87:f6:3e:a6:46:1f:bc:9c:a0:05:31:4a:53:2c:fc:7e:
d7:ef:59:88:66:79:df:44:ea:b3:23:be:94:c3:4d:6a:f0:32:
49:1a:76:27:74:8e:c1:ae:87:8a:c6:62:ea:f6:d9:45:36:ee:
9d:ab:16:1f:0d:1a:e1:b9:d9:98:11:10:0c:ac:ec:98:9f:cc:
ea:96:31:39:44:ea:b1:59:37:9d:35:7d:86:96:07:1d:56:ce:
b0:04:9e:b5:d5:60:68:4c:9b:71:fc:33:3a:b2:8b:03:d0:52:
f8:65:a5:1d:52:c0:e1:58:9a:ea:e5:89:7f:d4:d2:d4:7f:b1:
0a:7c:ee:97:7f:91:bc:42:37:fc:cf:6b:8e:99:80:6e:6d:7e:
06:35:44:0e:ec:43:11:1e:8f:10:19:60:33:a9:43:b0:cb:e5:
1c:98:a3:7a:0b:01:4e:fa:4f:9f:3c:ae:79:da:06:33:d1:f2:
6d:03:33:a0:43:c7:b7:7c:50:66:71:b5:e2:9a:64:d7:a6:74:
0c:1e:c2:3b:13:91:18:2d:44:44:7a:5e:fa:8f:d6:81:40:5e:
bf:5c:48:16:68:1b:31:99:22:9c:bb:62:18:85:39:27:e5:54:
db:68:66:9f:ce:00:d9:ef:32:d8:fc:74:93:8a:e4:97:92:be:
78:a3:45:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:41 2026 by rpki-client